Gerhard Schellhorn Wolfgang Reif Axel Schairer Paul A. Karger Vernon Austel David C. Toll Verified Formal Security Models for Multiapplicative Smart Cards. 339-368 2002 10 Journal of Computer Security 4 db/journals/jcs/jcs10.html#SchellhornRSKAT02